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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Cancelled) 

2. (Previously Presented) The system of claim 34, wherein the executable 

file is 

compiled by a compiler from a C-type programming language object model 
document. 

3. (Cancelled) 

4. (Previously Presented) The system of claim 34, wherein the instantiated 
security agent passes on each command from the commander to the object model unless such 
security agent deems such command to be of a type that should not be so passed on. 

5. (Previously Presented) The system of claim 34, wherein the security 
agent does not pass on to the object model a type of command that would expose the object 
model in a non-obfuscated form. 

6. (Previously Presented) The system of claim 34, wherein the security 
agent does not pass on to the object model a type of command that would expose the object 
model with a level of granularity finer than a pre-defined maximum. 

7. (Previously Presented) The system of claim 34, wherein the security 
agent passes on to the object model a substitute command that exposes the object model with a 
level of granularity coarser than the pre-defined maximum. 



8. (Previously Presented) The system of claim 34, wherein the loader 
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instantiates the security agent separately from the object model. 

9. (Previously Presented) The system of claim 34, wherein the loader 
instantiates the security agent as part of the object model. 

10. (Previously Presented) A method for loading a persisted object model 
from an object model document, the method comprising: 

providing a compiled executable file having an image source, a 
security source, and a loader; 

instantiating the loader in a memory of a computer upon a command 
from a commander to execute the executable file to instantiate the persisted object model; 

the loader instantiating the object model in the memory from the image 

source; 

the loader instantiating a security agent in the memory from the security 
source, the security agent limiting access to the object model as instantiated in the memory of 
the computer, wherein the security agent does not allow the object model to be exposed in a 
non-obfuscated form; and 

the loader returning to the commander a first reference to the instantiated 
security agent, whereby the commander in employing the first reference accesses the security 
agent rather than the instantiated object model. 

1 1 . (Original) The method of claim 1 0 further comprising the loader 
upon instantiating the security agent providing same with a second reference to the 
instantiated object model, whereby the commander does not have the second reference and 
therefore cannot directly access the object model or command same to act. 
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12. (Original) The method of claim 10 further comprising the 
instantiated security agent passing on each command from the commander to the object 
model unless such security agent deems such command to be of a type that should not be so 
passed on. 

13. (Original) The method of claim 12 comprising the security agent not 
passing on to the object model a type of command that would expose the object model in a 
non-obfuscated form. 

14. (Original) The method of claim 12 comprising the security agent not 
passing on to the object model a type of command that would expose the object model with a 
level of granularity finer than a pre-defined maximum. 

15. (Original) The method of claim 14 comprising the security agent passing 
on to the object model a substitute command that exposes the object model with a level of 
granularity coarser than the pre-defined maximum. 

16. (Original) The method of claim 10 comprising the loader 
instantiating the security agent as part of the object model. 

17. (Original) The method of claim 10 comprising the loader 
instantiating the security agent as part of the object model. 

1 8 . (Currently Amended) A computer-readable storage medium having 
stored thereon instructions, which when executed, instantiate a loader for an object model 
document for persisting an object model therein and enable a commander to indirectly access 
the object model, the object model document comprising a compiled executable file having an 
executable image source file, a an executable security source, and a an executable loader, the 
instructions comprising: 
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instantiating a loader in memory of a computer using the executable 
loade r, the loader instantiating in the memory of the computer: [[;]] 

instantiating (a) the persisted object model in the memory of the 
computer using the executable image source[[;]] and 

(b) instantiating a security agent in the memory of the computer using 
the executable security source, wherein the security agent limits access to the object model as 
instantiated in the memory of the computer such that the security agent does not allow the 
object model to be exposed in a non-obfuscated form; and wherein the instructions return to the 
commander a first reference to the instantiated security agent, whereby the commander in 
employing the first reference accesses the security agent rather than the instantiated object 
model. 

19. (Original) The medium of claim 18 wherein the executable file is 
compiled by a compiler from a C-type programming language object model 

document. 

20. (Original) The medium of claim 18 wherein the loader upon 
instantiating the security agent provides same with a second reference to the instantiated 
object model, whereby the commander does not have the second reference and therefore 
cannot directly access the object model or command same to act. 

21. (Original) The medium of claim 18 wherein the instantiated 
security agent passes on each command from the commander to the object model unless 
such security such security agent deems such command to be of a type that should not be 
so passed on. 

22. (Original) The medium of claim 21 wherein the security agent does 
not pass on to the object model a type of command that would expose the object model in a 
non-obfuscated form. 
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23. (Original) The medium of claim 21 wherein the security agent does 
not pass on to the object model a type of command that would expose the object model with 
a level of granularity finer than a pre-defined maximum. 

24. (Original) The medium of claim 23 wherein the security agent passes 
on to the object model a substitute command that exposes the object model with a level of 
granularity coarser than the pre-defined maximum. 

25. (Original) The medium of claim 18 wherein the loader instantiates the 
security agent separately from the object model. 

26. (Original) The medium of claim 1 8 wherein the loader instantiates the 
security agent as part of the object model. 

27-33. (Cancelled) 

34. (Currently Amended) A computer system comprising: 
an input device that receives a command input from a user to display information 
from an object model via a software application having an application commander; 

a compiled executable file having an executable image file source, an executable 
security source, and an executable loader, 

wherein upon a command from the commander to execution of execute the 
executable file, a loader is instantiated in a memory of the computer using the executable 
loader, the loader instantiating in the memory of the computer (a) an object model is 
instantiated in a memory of the system using the executable image source, and (b) a 
security agent is instantiated in the memory of the computer using the security source, the 
security agent controlling access to the object model as instantiated in the memory of the 
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computer, and (c) the - loader is instantiatod in tho memory of the - computer using trie - 
executable loader, and wherein during execution of the executable file, the loader provides 
a first reference is generated for the instantiated security agent to point to the object model 
and a second reference is generated for the application commander to point to the 
instantiated security agent, and wherein, in response to an application request for 
information from the object model: 

(i) the application commander employs the first reference to accesses the 
security agent rather than the object model, and 

(ii) the security agent limits access to the object model before accessing the 
requested information from the object model using the second reference; and 

a computer monitor that displays the requested information, wherein the requested 
information from the object model is provided by the security agent to the application 
commander if the request for information does not act to expose the object model in a non- 
obfuscated form. 
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